Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft
File: aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft (raw, json)
Hash identifier: MhIXf7ITFZti3kVqnxWnn2vxOpAfrG2pP70xR4ACbtg=
Subject key identifier: 53:30:59:3B:DA:C8:1B:AF:32:8B:BE:D8:F1:A5:6B:9C:B3:F6:DB:B1
Authority key identifier: 68:9C:68:A4:56:61:F9:0A:40:59:BD:8C:29:A3:C9:67:BF:92:E8:55
Certificate issuer: /CN=689c68a45661f90a4059bd8c29a3c967bf92e855
Certificate serial: 01976A05BF0D6974C13D6406ECDE51C2BFC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJxopFZh-QpAWb2MKaPJZ7-S6FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft
Manifest number: 0550
Signing time: Fri 13 Jun 2025 16:00:50 +0000
Manifest this update: Fri 13 Jun 2025 16:00:50 +0000
Manifest next update: Sat 14 Jun 2025 16:00:50 +0000
Files and hashes: 1: VftZMAe-HTAVpMfwxes2FDGztqs.roa (hash: KKajIYpdkVhXrGRISoXddoe+7uEBtFz7JC2M/TbIWjs=)
2: aJxopFZh-QpAWb2MKaPJZ7-S6FU.crl (hash: lFHKILiBu4OYiwe+GkBBQVTAU17RdyGBUZtObV9ju0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJxopFZh-QpAWb2MKaPJZ7-S6FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:bf:0d:69:74:c1:3d:64:06:ec:de:51:c2:bf:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=689c68a45661f90a4059bd8c29a3c967bf92e855
Validity
Not Before: Jun 13 16:00:50 2025 GMT
Not After : Jun 14 16:00:50 2025 GMT
Subject: CN=5330593bdac81baf328bbed8f1a56b9cb3f6dbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:67:60:c2:71:2e:17:f9:5b:5b:cb:cd:2e:
f0:67:96:29:09:71:66:05:ce:50:21:bf:24:78:9b:
36:2e:48:0d:6a:3e:b4:6c:01:d0:dd:6b:51:32:08:
a1:0f:7c:72:53:5e:b5:55:19:4e:4a:61:6a:1e:29:
e1:51:00:58:2d:83:32:22:a1:5e:fd:83:91:89:e0:
3a:0d:bf:fc:0e:17:28:b9:a8:bc:01:4b:c8:ca:ed:
2b:a9:cd:36:45:7e:00:6c:dd:90:e6:7b:44:a3:16:
74:72:15:70:dc:06:83:8e:cc:32:4f:0d:90:83:a7:
b4:f5:f6:2f:ef:54:a4:0e:b7:38:d7:1f:7b:77:b1:
af:57:ab:8d:47:b0:14:7a:ab:7f:84:95:da:33:23:
25:5e:39:e5:a6:aa:09:1d:34:87:23:82:ba:2b:0e:
ea:27:ea:09:f0:8f:ff:9d:93:81:03:0c:c5:5e:b5:
4e:82:a0:c9:05:bd:99:7f:26:fa:7a:a9:8e:30:79:
97:f3:aa:35:1a:fe:b0:cd:9b:17:6a:f5:78:15:56:
c6:b9:86:39:8b:ef:36:16:f0:54:69:a3:af:71:97:
9f:14:9b:1c:8c:e2:72:77:af:29:64:e1:bc:b9:5f:
6c:74:3c:f0:a6:11:b7:bd:9b:7e:a9:b6:38:ff:0b:
44:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:30:59:3B:DA:C8:1B:AF:32:8B:BE:D8:F1:A5:6B:9C:B3:F6:DB:B1
X509v3 Authority Key Identifier:
keyid:68:9C:68:A4:56:61:F9:0A:40:59:BD:8C:29:A3:C9:67:BF:92:E8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJxopFZh-QpAWb2MKaPJZ7-S6FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:34:44:0b:49:18:0f:f7:db:10:44:c9:da:ef:ad:56:d0:7e:
2a:32:b0:89:f7:ef:1b:18:6a:08:92:30:7a:9b:69:7b:6b:07:
de:5d:b7:6a:cb:04:29:6d:f6:0f:6d:27:92:3f:86:31:97:67:
2f:19:a0:32:a5:a6:a5:8a:4e:32:d2:ab:ea:a5:96:e2:0b:d0:
a3:0c:ca:75:9a:58:9b:ef:fa:c3:25:05:9d:31:66:f2:fb:30:
fa:43:03:c9:1e:33:11:2e:6f:cb:52:a3:c2:66:17:c2:66:81:
5f:44:2a:c7:f7:0d:96:f9:6c:9b:19:9d:54:42:9f:fe:1c:12:
cf:fa:26:72:a6:d0:6c:7d:97:1e:d9:b8:31:55:dc:4c:77:46:
de:00:b6:66:5f:e5:fb:7d:2b:cf:e9:21:54:af:eb:a8:10:fa:
d2:4d:08:b8:09:38:2f:6d:bb:ba:70:89:59:bf:3a:90:a5:4d:
24:ca:8f:e5:86:5d:0f:5e:35:44:60:5a:a6:c9:b0:1b:7e:81:
c0:3b:34:df:78:ca:f8:d1:78:c1:6b:e3:ef:85:38:2c:30:5e:
54:a0:20:db:cb:cd:90:7c:4d:3c:87:2d:bd:16:47:a6:d9:cc:
83:7d:09:13:1b:36:f7:12:43:fb:c7:39:ac:64:24:d2:5d:5a:
b5:ad:99:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:21:47 2025 by rpki-client